Static task
static1
Behavioral task
behavioral1
Sample
f6c8c73a6b3b21528e8b76f8f6a5a89b444ee029457974456e43ae598a786e90.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f6c8c73a6b3b21528e8b76f8f6a5a89b444ee029457974456e43ae598a786e90.exe
Resource
win10v2004-20241007-en
General
-
Target
f6c8c73a6b3b21528e8b76f8f6a5a89b444ee029457974456e43ae598a786e90
-
Size
7KB
-
MD5
ff11d2774a35d7c27b910df33ebe6f2e
-
SHA1
c77f459998c9892967e74443f42c19caea4286d7
-
SHA256
f6c8c73a6b3b21528e8b76f8f6a5a89b444ee029457974456e43ae598a786e90
-
SHA512
b724f08a054d981180a98eb1b7ea14b1029108b880e17d4f09c0f47765e586dae64d1fde8014144dc503d002fb8026654c87b5dcc17f97b838c75f684c1c2a9f
-
SSDEEP
192:dLf/TEFU2hf/xfKj6/4n6nxt6tetARdVt:dLTEi2xnuQcJ/V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6c8c73a6b3b21528e8b76f8f6a5a89b444ee029457974456e43ae598a786e90
Files
-
f6c8c73a6b3b21528e8b76f8f6a5a89b444ee029457974456e43ae598a786e90.exe windows:6 windows x64 arch:x64
5c37565acf4892c7a9ce7378e5ad3204
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryA
SetCriticalSectionSpinCount
MultiByteToWideChar
ConvertDefaultLocale
lstrlenA
lstrlenW
user32
RegisterClassW
IsWindowVisible
GetWindowContextHelpId
MessageBoxA
GetWindowLongPtrW
IsDialogMessageW
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 540B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ